AI Governance in International Schools: Why Frameworks Written for National Systems Don't Fit

I have spent the last several years working in international education, and there is a pattern I see constantly when it comes to AI governance. A school picks up a national framework, usually the DfE's guidance if it is a British curriculum school, or perhaps something from the state education department if it follows an American model, and adopts it wholesale. Job done. Box ticked. Move on.

Except it is not done. Because that framework was written for a national context, and international schools do not operate in national contexts. They operate in the spaces between them: between the curriculum they follow and the country they sit in, between the parents they serve and the regulatory environments they navigate, between the cultural expectations of a dozen different nationalities represented in a single classroom.

This is the fundamental challenge of AI governance in international schools, and almost nobody is talking about it.

The Jurisdictional Problem

Let me make this concrete. I work in Dubai. If you are a British curriculum school in the UAE, you are subject to UAE federal data protection law (the PDPL, enacted in 2022), the regulations of your licensing authority (KHDA in Dubai, ADEK in Abu Dhabi), the expectations of the British curriculum you follow, and potentially the EU AI Act if you process personal data of EU citizens (which, in a school with families from 50 nationalities, you almost certainly do).

Now add AI into that mix. Your school uses an AI-powered assessment tool developed by a US company, hosted on AWS servers in Ireland, processing data from students who hold UAE, British, Indian, and EU passports. Which data protection regime applies? All of them. Which AI governance framework should you follow? There is no clear answer because none of the major frameworks were written for this scenario.

This is not a niche edge case. This is the reality for thousands of international schools worldwide: British schools in Hong Kong, American schools in Singapore, IB schools in the Middle East, European schools in Africa. All are operating at the intersection of multiple regulatory environments, none of which were designed with them in mind.

Why National Frameworks Fall Short

National frameworks assume a shared regulatory context. The DfE guidance assumes UK GDPR. The US frameworks assume FERPA and COPPA. The EU AI Act assumes EU jurisdiction. Each of these is internally coherent, but none accounts for the international school's reality of overlapping jurisdictions.

There are three specific areas where this creates problems.

Data sovereignty. Where is your student data stored? Where is it processed? Many AI tools used in schools route data through servers in the US, the EU, or Asia. International schools may be legally required to keep certain data within their host country (the UAE's PDPL, for example, has data localisation provisions). A national framework from the UK will not flag this for you because it assumes your data stays within UK jurisdiction.

Parental expectations. International school communities are culturally diverse. What parents from one cultural background expect regarding data privacy, AI use, and educational technology may differ significantly from another. I have sat in parent information evenings where families from northern Europe asked detailed questions about algorithmic transparency while families from other backgrounds were more concerned about whether AI was replacing teacher relationships. A national framework reflects one cultural context. An international school needs to navigate many simultaneously.

Curriculum versus country. Most international schools follow a curriculum from one country while operating in another. Your curriculum authority (Cambridge, Edexcel, College Board, IB) may have its own AI guidance that differs from the guidance issued by your host country's education authority. When these conflict, and they increasingly do, which takes precedence? National frameworks do not answer this question because they assume curriculum and jurisdiction are aligned.

What International Schools Actually Need

I have spent a long time thinking about this, both through my work building the AI Literacy Audit Tool and through conversations with school leaders across the Middle East, Asia, and Europe. Here is what I think international schools need that they are currently not getting.

A multi-framework mapping approach. Rather than picking one framework and hoping it covers everything, international schools need to map their AI practices against multiple frameworks simultaneously. This is exactly what the AI Literacy Audit Tool does: it cross-references your school's readiness against 33 international frameworks, highlighting where you meet, exceed, or fall short of each one. The result is not a single score but a multidimensional picture of your readiness landscape.

But you do not need a tool to start this process. Begin by identifying the frameworks that are legally binding in your context (host country data protection law, any relevant AI regulation), the frameworks that are normatively expected (your curriculum authority's guidance, any accreditation body requirements), and the frameworks that represent best practice (UNESCO, OECD, IB position papers). Then audit your current AI practices against each category.

A localised AI policy. Your AI policy cannot be a copy-paste from your curriculum authority's template. It needs to reflect your specific jurisdictional context, your community's cultural expectations, and the tools you actually use. I recommend international schools build their AI policy in layers: a base layer of universal principles (transparency, human oversight, data protection), a compliance layer that maps to your specific legal obligations, and a community layer that reflects the values and expectations of your school community.

Cross-functional governance that includes a jurisdictional lens. Your AI steering group needs someone who understands your host country's regulatory environment. In many international schools, this is the school's data protection officer or legal advisor. If you do not have one, you need access to one. AI governance is no longer something you can manage with good intentions and common sense; it has legal dimensions that require professional input.

Teacher CPD that acknowledges the international context. When I train teachers in international schools, I do not just talk about AI tools and pedagogy. I talk about the fact that their students come from regulatory environments with different norms around data, privacy, and technology. A student who has grown up under GDPR has a different intuitive understanding of data rights than a student who has not. Teachers in international schools need to be aware of this and able to navigate it.

The Opportunity

Here is the thing that keeps me optimistic. International schools are actually better positioned to get AI governance right than most national schools. Why? Because they are already used to navigating complexity. They already operate across cultural and regulatory boundaries. They already have governance structures that account for multiple stakeholders with different expectations.

The international school sector does not need to wait for someone to write the perfect framework. It needs to recognise that its unique position requires a unique approach: one that draws from multiple frameworks rather than deferring to one, one that takes jurisdictional complexity seriously rather than ignoring it, and one that centres the school community rather than assuming a homogeneous national context.

I built the AI Literacy Audit Tool because I saw this gap and knew that school leaders needed practical support to navigate it. Every audit report maps your school's readiness against the full landscape of international frameworks, giving you the evidence base to make decisions that are informed, defensible, and appropriate for your specific context.

No single national framework will do that for you. But with the right approach, your international school can build AI governance that is not just compliant but genuinely robust; governance that holds up no matter which framework you are measured against.